peach-browser

@june

A free, open source, local-first password manager for Chrome, Firefox, and Android.

TypeScript

v5.3.12 · 1,780 saves · 70,179 lines · updated 2 weeks ago

420 files
9e3dd1d2e969
back to HEAD
crypto-core/74.1 KB · 1 month ago
fixtures/4.7 KB · 1 month ago
icons/6.4 KB · 5 months ago
public/398.1 KB · 1 month ago
scripts/197.2 KB · 1 month ago
build-noise-core.mjs1.8 KB · 3 months agobuild-peachscript.pyBuild PeachScript-Regular.otf — 256 historical-runic glyphs.30.2 KB · 6 months agobun-ambient.d.tsAmbient declarations for the Bun APIs the release scripts use.772 B · 1 month agocheck-cross-client-adoption.test.ts656 B · 1 month agocheck-cross-client-sync.mjs48.5 KB · 1 month agocheck-extension-surface.mjs699 B · 1 month agocheck-noise-core.mjsPB-26-003: verify the committed Noise WASM still matches crypto-core source.2.1 KB · 1 month agocheck-sw-static-imports.mjsFails the build if any chunk reachable from the MV3 service worker still contains a runtime import().3.3 KB · 3 months agoci.ts4.0 KB · 1 month agoclean-chrome-dist.mjs442 B · 1 month agoclean-firefox-artifacts.mjs457 B · 6 months agocross-client-gradle.init.gradle224 B · 1 month agogenerate-kat.mjsgenerate-kat.mjs — recompute the pinned ciphertext for self-test.ts (PCH-01-020).1.1 KB · 4 months agomanifest-parity.test.tsPB-26-610 — the source manifests are security-reviewed; the built manifests are what ships.4.4 KB · 1 month agopackage-source.test.ts8.5 KB · 1 month agopackage-source.ts9.0 KB · 1 month agoprocess-readiness.d.mtsTypes for the plain-JavaScript readiness helper (PB-26-904).479 B · 1 month agoprocess-readiness.mjs766 B · 1 month agoprocess-readiness.test.ts1.0 KB · 1 month agorelease-firefox.ts2.9 KB · 1 month agorelease-gate.test.ts7.5 KB · 1 month agorelease-gate.tsPB-26-210: Release browser-gate validation.3.7 KB · 1 month agorelease-lib.test.tsscripts/release-lib.test.ts PB-26-211: release tool hardening — security tests for the argv-based runner.11.8 KB · 1 month agorelease-lib.tsscripts/release-lib.ts Shared argv-based runner for release tooling (PB-26-211).8.4 KB · 1 month agorelease.test.ts1.7 KB · 1 month agorelease.ts5.3 KB · 1 month agoroot-derivation-gate.test.tsCampaign task 2.4 — no shipping source may derive device key material from the vault root.2.5 KB · 1 month agorun-release-browser-gate.ts930 B · 1 month agotest-firefox-passkeys.mjs17.9 KB · 1 month agotest-firefox-sender-context.mjs13.6 KB · 1 month agoweb-accessible-resources.test.ts2.7 KB · 1 month ago
src/4.1 MB · 3 weeks ago
background/1.3 MB · 1 month ago
aes.test.ts2.8 KB · 1 month agoaes.tsaes.ts — AES-256-GCM encrypt/decrypt primitives for vault storage.4.5 KB · 1 month agoalarms.test.ts11.6 KB · 1 month agoalarms.ts3.1 KB · 1 month agoclipboard.double-failure.test.tsT-037: clipboard double-failure / alreadyWritten path7.1 KB · 4 months agoclipboard.test.ts10.1 KB · 4 months agoclipboard.tsClipboard write + reliable auto-clear — audit fix HV-2.8.5 KB · 4 months agocodex-handlers.test.tsTests for src/background/codex-handlers.ts.7.7 KB · 1 month agocodex-handlers.tscodex-handlers.ts — message handlers that back the Peach Codex flow.10.2 KB · 1 month agocommands.test.ts1.6 KB · 1 month agocommands.tsKeyboard command handler — routing for summon-inline: 1.2.7 KB · 1 month agodevice-identity.test.ts16.0 KB · 1 month agodevice-identity.tsLocal-device identity helpers.20.2 KB · 1 month agoentry.lock-port.test.tsThe lock-on-close onConnect listener accepts only our nonce'd "popup-<uuid>" port from the extension page and ignores anything else.4.9 KB · 1 month agoentry.ts5.7 KB · 1 month agohealth.test.ts4.2 KB · 5 months agohealth.tshealth.ts — Pro advanced vault health analysis.5.1 KB · 5 months agolicense.ts6.3 KB · 1 month agolicense.verification.test.tsT-009: License Ed25519 signature verification10.8 KB · 1 month agolocked-sync-spool.test.ts8.1 KB · 1 month agolocked-sync-spool.ts10.2 KB · 1 month agomesh-relay-listener.test.ts2.5 KB · 1 month agomesh-relay-listener.ts8.7 KB · 1 month agomessage-policy.test.ts7.1 KB · 1 month agomessage-policy.ts7.4 KB · 1 month agomessages.adversarial.test.tsmessages.adversarial.test.ts — Layer 3 §3.3 adversarial message handler tests.44.9 KB · 1 month agomessages.autolock-refresh.test.tsPB-26-107: passive page traffic must not refresh the auto-lock timer.5.3 KB · 1 month agomessages.batch-sanitize.test.tsT-008: PCH-01-016 batch-add canary/tag sanitization7.1 KB · 4 months agomessages.create-vault-from-root-key.test.ts3.0 KB · 4 months agomessages.edit-origin.test.tsT-022: GET_ENTRY_FOR_EDIT via sender.url + locked-vault AUTOFILL_QUERY10.7 KB · 1 month agomessages.entry-write-origin.test.tsPB-26-106: content-script entry mutations must be bound to the entry's own domain set.10.9 KB · 1 month agomessages.passkey-offer-decline.test.tsPB-26-109: the passkey offer-decline handler is page-relay, so any page's content script may send it.5.3 KB · 1 month agomessages.test.ts78.1 KB · 1 month agomessages.tsmessages.ts — the only background message handler.87.6 KB · 1 month agoml.predictbatch.test.tsT-030: ml.ts predictBatch — batch sizes, softmax stability with extreme weights7.7 KB · 4 months agoml.ts6.4 KB · 1 month agonotes.test.ts9.4 KB · 1 month agooffscreen.html310 B · 4 months agooffscreen.tsOffscreen document script — audit fix HV-2c.1.8 KB · 4 months agopair-secrets.test.ts11.1 KB · 1 month agopair-secrets.tspair-secrets.ts — PB-26-213: the reusable rendezvous secret must never sit in plaintext in chrome.storage.local.10.0 KB · 1 month agopaired-devices.test.ts20.1 KB · 1 month agopaired-devices.tsPaired-device registry — v3 sync.28.7 KB · 1 month agopasskey-chrome-ceremony.test.tspasskey-chrome-ceremony.test.ts — covers the Chrome chrome.webAuthenticationProxy ceremony path that the Firefox-proxy test file does NOT exercise.32.4 KB · 1 month agopasskey-crypto.test.ts6.0 KB · 6 months agopasskey-crypto.ts10.9 KB · 1 month agopasskey-deny-on-close.test.tspasskey-deny-on-close.test.ts — M8/COR-0092.8 KB · 5 months agopasskey-firefox-proxy.test.tspasskey-firefox-proxy.test.ts — covers the v2.12.0 Firefox content-script proxy path.19.1 KB · 1 month agopasskey.ed25519.test.tsT-015: Ed25519 passkey round-trip9.4 KB · 4 months agopasskey.ts48.1 KB · 1 month agopending-adoption-holder.test.ts2.2 KB · 1 month agopending-adoption-holder.ts3.4 KB · 1 month agopending-vouched-devices.test.ts1.7 KB · 1 month agopending-vouched-devices.tsPending vouched devices — audit fix MV-7.2.3 KB · 1 month agorecovery-pending.test.ts3.1 KB · 1 month agorecovery-pending.tsBackground-owned state set while the user has just created or rotated a vault identity and is confirming their recovery words.1.7 KB · 1 month agorecovery-words.test.ts19.4 KB · 1 month agorecovery.adversarial.test.tsrecovery.adversarial.test.ts — Layer 3 §3.2 adversarial recovery words tests.19.6 KB · 1 month agorelay-adoption-bg.test.ts47.9 KB · 1 month agorelay-adoption-bg.ts28.0 KB · 1 month agoself-test.test.ts1.2 KB · 4 months agoself-test.tsself-test.ts — Known-Answer Test (KAT) for the Peach crypto stack.3.8 KB · 4 months agostorage-access.test.ts2.9 KB · 1 month agostorage-access.tsPB-26-203: the session-key escrow is only as trustworthy as the boundary around chrome.storage.session.1.5 KB · 1 month agosync-alarm.test.ts4.0 KB · 3 months agosync-alarm.tssync-alarm.ts — the 10-minute background sync tick.3.8 KB · 2 months agosync-alerts.test.ts2.5 KB · 1 month agosync-alerts.tsPending sync security alerts.3.1 KB · 1 month agosync-coordinator.test.ts30.4 KB · 1 month agosync-coordinator.tsVault sync — Phase 2 manifest-diff coordinator.20.5 KB · 1 month agosync-generation.test.tsThe §11 secure-reset contract: the durable generation record, the six states, create-on-miss refusal, archival by generation, crash recovery at every step, and the sync gate.12.7 KB · 1 month agosync-generation.tsThe durable Sync-generation record and its state machine (protocol §11).15.4 KB · 1 month agosync-runner.test.ts14.7 KB · 1 month agosync-runner.tsProduction sync runner — composes the live vault adapter, WebSocket transport, and coordinator into the function the dispatcher injects via setSyncRunner.7.9 KB · 1 month agosync-settings.test.ts3.4 KB · 1 month agosync-settings.ts4.6 KB · 1 month agosync-static.test.tsIV.7 — Static safety assertions for vault sync.3.9 KB · 1 month agosync-trigger.test.ts17.2 KB · 1 month agosync-trigger.tssync-trigger.ts — central sync dispatcher.13.6 KB · 1 month agosync-vault-adapter.test.ts50.1 KB · 1 month agosync-vault-adapter.tsProduction adapter that backs runSyncInitiator with the live vault.25.4 KB · 1 month agovault-createVaultFromRootKey.test.ts8.2 KB · 3 months agovault-history.test.tsVault history tests.11.8 KB · 1 month agovault.adversarial.test.tsvault.adversarial.test.ts — Layer 3 §3.1 adversarial vault tests.34.3 KB · 1 month agovault.card-decline.test.tsPB-26-108: declined-card metadata must not be offline-enumerable.8.5 KB · 1 month agovault.consolidate-passkeys.test.tsT-023: vault.consolidatePasskeyEntries — passkey merge with lastUsed ranking8.9 KB · 2 months agovault.corruption.test.tsT-018: Vault corruption vs wrong-password discrimination (M7/COR-007)9.0 KB · 1 month agovault.duress-adoption.test.ts4.3 KB · 2 months agovault.entry-id-namespace.test.ts4.2 KB · 1 month agovault.hibp-padding.test.tsPCH-02-007 regression tests — the HIBP k-anonymity range request must ask for response padding, and the parser must stay correct on padded responses.2.3 KB · 4 months agovault.purge-trash.test.tsT-024: vault.purgeExpiredTrash — retention cutoff boundary9.7 KB · 4 months agovault.rotate-sync-identity.test.tsT-016: rotateSyncIdentity — new root key, cleared peers, recovery pending9.6 KB · 1 month agovault.session-escrow.test.ts17.1 KB · 1 month agovault.sync-clamp.test.tsUnit tests for HV-1 — sync timestamp clamp + remote-mutation alerts.5.8 KB · 1 month agovault.test.ts56.2 KB · 1 month agovault.tombstone-ledger.test.ts5.8 KB · 1 month agovault.tsvault.ts — sole owner of vault state and chrome.storage vault keys.133.2 KB · 1 month agovault.update-entry-sanitize.test.tsPCH-02-001 regression tests — UPDATE_ENTRY patch path must route canary/tags/passkey through the same sanitizers the add/restore/sync funnels use (sanitizeCanary / sanitizePasskey / sanitizeTags).7.7 KB · 1 month ago
content/500.1 KB · 1 month ago
passkey-toast/22.0 KB · 1 month ago
_setup.tsShared test harness for the AUTOFILL-TESTS draft suite.7.7 KB · 1 month ago_smoke.test.ts@vitest-environment jsdom995 B · 4 months agocontent-ml-detector.ts6.1 KB · 6 months agocontent.adversarial.test.ts@vitest-environment jsdom21.5 KB · 4 months agocontent.detect.test.ts@vitest-environment jsdom19.0 KB · 1 month agocontent.dismissal.test.ts@vitest-environment jsdom11.8 KB · 1 month agocontent.field-icon.test.ts@vitest-environment jsdom4.9 KB · 1 month agocontent.field-interaction.test.ts@vitest-environment jsdom11.4 KB · 1 month agocontent.fill.test.ts@vitest-environment jsdom9.1 KB · 1 month agocontent.form-action-gate.test.ts@vitest-environment jsdom6.6 KB · 1 month agocontent.initial-scan.test.ts@vitest-environment jsdom5.8 KB · 4 months agocontent.interaction.test.ts@vitest-environment jsdom5.3 KB · 1 month agocontent.message-routing.test.ts@vitest-environment jsdom11.9 KB · 1 month agocontent.policy.test.ts@vitest-environment jsdom5.3 KB · 1 month agocontent.save.test.ts@vitest-environment jsdom5.6 KB · 1 month agocontent.selector-ui.test.ts@vitest-environment jsdom13.4 KB · 1 month agocontent.totp-group-icon.test.ts@vitest-environment jsdom3.4 KB · 2 months agodetect.test.ts@vitest-environment jsdom7.5 KB · 2 months agodetect.ts16.4 KB · 1 month agofill.test.ts@vitest-environment jsdom8.8 KB · 1 month agofill.ts6.0 KB · 1 month agoidentity-helper.test.ts2.0 KB · 4 months agoidentity-helper.ts1.7 KB · 4 months agoindex.ts48.5 KB · 1 month agoinject.generator.test.ts@vitest-environment jsdom1.7 KB · 1 month agoinject.keyguard.test.ts@vitest-environment jsdom2.5 KB · 4 months agoinject.tsinject.ts — autofill icon + selector overlay, injected into pages.176.7 KB · 1 month agointeraction.test.ts@vitest-environment jsdom2.0 KB · 4 months agointeraction.ts1.8 KB · 4 months agopasskeys-firefox.test.ts@vitest-environment jsdom16.2 KB · 1 month agopasskeys-firefox.tspasskeys-firefox.ts — isolated-world WebAuthn interception for Firefox.16.3 KB · 1 month agopolicy.test.ts@vitest-environment jsdom4.1 KB · 1 month agopolicy.tspolicy.ts — page-scraping helpers for password requirements.7.3 KB · 1 month agosave.ts8.7 KB · 4 months ago
crypto/108.6 KB · 1 month ago
popup/1.3 MB · 3 weeks ago
codex/239.2 KB · 1 month ago
aztec.tsaztec.ts — Aztec 2D barcode generation with round-trip verification.10.1 KB · 1 month agobrowser-bundle.test.ts674 B · 5 months agocodex.adversarial.test.tscodex.adversarial.test.ts — Layer 3 §3.4 adversarial Codex tests.24.8 KB · 1 month agocodex.multistripe.test.tsT-017: Codex multi-stripe round-trip8.9 KB · 4 months agocodex.suite.test.tscodex.suite.test.ts — cross-cutting regression suite for the Codex pipeline.9.9 KB · 5 months agocodex.test.ts20.8 KB · 1 month agoconfirmation.tsPick 3 distinct positions in [1, 12] for the recovery-words confirmation gate.601 B · 5 months agoerasure.tserasure.ts — Reed-Solomon erasure coding around the WASM library.13.9 KB · 5 months agogenerate.test.ts17.1 KB · 5 months agogenerate.tsgenerate.ts — full Codex generation pipeline.16.9 KB · 1 month agohelpers.tshelpers.ts — shared utilities for Codex generation and restoration.7.8 KB · 1 month agonode-wasm.tsNode-only WASM byte loader for Vitest.1.1 KB · 5 months agopdf-import.clamp.test.ts2.5 KB · 4 months agopdf-import.sandbox.test.tsT-007: MV-9 pdf.js sandbox flags regression test4.6 KB · 4 months agopdf-import.test.tspdf-import.test.ts — coverage for the testable surface of the PDF import path.13.9 KB · 1 month agopdf-import.tspdf-import.ts — restore from a Codex PDF instead of a camera scan.26.8 KB · 1 month agopdf-layout.tspdf-layout.ts — A4 Codex page geometry shared between the generator and the PDF importer.1.4 KB · 5 months agopdf.tspdf.ts — render the printable Codex PDF.8.1 KB · 5 months agoreed-solomon.tsBrowser-safe wrapper around the Reed-Solomon WASM exports.5.2 KB · 4 months agorestore.test.tsrestore.test.ts — coverage for ChunkBuffer, parseRawScan, reconstructAndVerify.11.0 KB · 1 month agorestore.tsrestore.ts — Peach Codex restoration library (popup-side).16.5 KB · 1 month agors-loader.tsrs-loader.ts — load the Reed-Solomon erasure WASM module.2.4 KB · 5 months agoscan-limits.test.tsscan-limits.test.ts — PB-26-207 resource bounds on the Codex scan path.12.5 KB · 1 month agoscanner.tsscanner.ts — camera-based Aztec scanning for Codex restoration.1.8 KB · 5 months ago
components/85.3 KB · 1 month ago
styles/227.4 KB · 3 weeks ago
views/650.2 KB · 3 weeks ago
Add.tsx31.7 KB · 1 month agoAdoptVaultView.test.tsx@vitest-environment jsdom14.5 KB · 1 month agoAdoptVaultView.tsx14.0 KB · 1 month agoCodexGenerateView.test.tsx@vitest-environment jsdom2.9 KB · 1 month agoCodexGenerateView.tsxPeach Codex — generation view.24.3 KB · 1 month agoCodexRestoreView.test.tsx@vitest-environment jsdom7.8 KB · 1 month agoCodexRestoreView.tsxPeach Codex — restoration view.24.2 KB · 1 month agocontracts.test.tsx@vitest-environment jsdom65.8 KB · 1 month agoEntry.totp-params.test.tsx@vitest-environment jsdom4.5 KB · 1 month agoEntry.tsx81.5 KB · 1 month agoExport.csv.test.ts@vitest-environment jsdom1007 B · 2 months agoExport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return (if (signal()) return <X/>).21.2 KB · 1 month agoHealth.test.tsx@vitest-environment jsdom2.5 KB · 5 months agoHealth.tsx21.2 KB · 1 month agoImport.test.tsx@vitest-environment jsdom4.1 KB · 1 month agoImport.tsxSignal-conditioned views in this file must use <Show>, never a signal-conditioned early return — see Projects.md §4.1.32.2 KB · 1 month agoInitialSyncView.test.tsx@vitest-environment jsdom1.3 KB · 3 months agoInitialSyncView.tsx1.7 KB · 3 months agoLock.test.tsx@vitest-environment jsdom5.6 KB · 1 month agoLock.tsx50.1 KB · 1 month agoNoteEditor.toHtml.test.ts@vitest-environment jsdom3.6 KB · 5 months agoNoteEditor.tsx7.6 KB · 1 month agoNotesEditor.tsx7.6 KB · 1 month agoNotesMode.tsx2.9 KB · 5 months agoNotesTOC.tsx4.6 KB · 2 months agoOnboarding.tsx7.4 KB · 2 months agoPairDevice.test.tsx@vitest-environment jsdom8.3 KB · 1 month agoPairDevice.tsxPairDevice — the pairing surface, opened from the Settings → Sync card.11.0 KB · 1 month agoPanic.tsx6.0 KB · 6 months agoPasskeyApproval.tsx2.1 KB · 6 months agoProCelebration.tsx646 B · 5 months agoProNudge.test.tsx@vitest-environment jsdom2.4 KB · 3 weeks agoProNudge.tsx2.4 KB · 3 weeks agoRecoveryWordDisplay.tsx8.9 KB · 1 month agoRecoveryWordEntry.tsx11.4 KB · 4 months agoSettings.tsx106.9 KB · 1 month agoTrashView.tsx5.7 KB · 6 months agovault-search.test.ts3.4 KB · 1 month agovault-search.ts4.6 KB · 1 month agoVault.tsx26.3 KB · 1 month agoview-test-utils.tsx1.1 KB · 4 months agoWhatsNew.tsx2.2 KB · 1 month agozxcvbn-strength.test.tsLV-8: the @zxcvbn-ts replacement must score the master-password strength meter on the same 0-4 scale as the old zxcvbn, with dictionaries loaded (language-common is what keeps weak passwords from scoring optimistically).1.2 KB · 4 months ago
App.tsx83.6 KB · 3 weeks agocopy.tsPopup-side copy helper.1.6 KB · 1 month agofirefox-passkey.tsfirefox-passkey.ts — popup-context WebAuthn caller for the Firefox path.4.0 KB · 6 months agogenerator-policy.ts2.2 KB · 1 month agoimport.csv.formulainjection.test.tsT-021: CSV formula-injection on import (round-trip)6.1 KB · 4 months agoindex.html1.1 KB · 5 months agoindex.tsx155 B · 1 month ago
shared/926.7 KB · 3 weeks ago
noise-core-wasm/441.1 KB · 1 month ago
adoption-protocol.test.ts3.9 KB · 1 month agoadoption-protocol.ts13.0 KB · 1 month agobridge.ts1.6 KB · 5 months agobrowser.test.tsbrowser.test.ts — locks down feature-detected browser identification.6.5 KB · 5 months agobrowser.tsbrowser.ts — feature-detected browser identifier shared by background, popup, and content scripts.1.3 KB · 6 months agocodex-types.tscodex-types.ts — shared shapes for the Peach Codex.10.4 KB · 1 month agoconfig.tsWeb3Forms access key for the in-app feedback form (Settings → feedback).827 B · 3 months agoconstant-time.test.ts1.9 KB · 3 months agoconstant-time.tsCompare fixed-format cryptographic values without data-dependent early exit.823 B · 3 months agodevice-manifest.test.ts13.0 KB · 1 month agodevice-manifest.tsDevice manifest — v2 brief §4.3.16.3 KB · 1 month agodomain.homograph.test.tsLV-2: homograph detector tests.1.4 KB · 1 month agodomain.test.ts1.5 KB · 1 month agodomain.ts2.6 KB · 1 month agoeff-short-wordlist.test.ts458 B · 1 month agoeff-short-wordlist.txt7.0 KB · 1 month agofavicon.test.ts1.2 KB · 6 months agofavicon.tsResolves a favicon URL for a given domain.3.4 KB · 4 months agogenerate.empty-pool.test.tsT-025: generate.ts empty-pool guard and maximum-length boundary3.9 KB · 1 month agogenerate.test.ts2.3 KB · 1 month agogenerate.ts3.0 KB · 1 month agoimport-limits.tsImport-path resource bounds — audit fixes MV-4 (decompression bomb) and MV-5 (unbounded file/string allocation).1.7 KB · 1 month agoimport.test.ts9.3 KB · 1 month agoimport.tsany is intentional throughout this module (L17/I3/QUA-010): import files are user-supplied external JSON whose schemas vary by source app and version (1Password CPG, Bitwarden, CXF, generic CSV).14.7 KB · 1 month agoinitial-sync.test.ts911 B · 3 months agoinitial-sync.ts667 B · 3 months agolegacy-identity-derivation.test-support.tsRoot→device key derivation, retained for tests only — campaign task 2.4.3.1 KB · 1 month agomesh-peer-role.ts1.9 KB · 1 month agoml.ts1.4 KB · 6 months agonoise-blake2s-kat.test.ts3.3 KB · 1 month agonoise-core.ts4.0 KB · 1 month agonoise-js.test.tsNoise NK auth proof regression test.11.1 KB · 1 month agonoise-js.tsNoise NK initiator for browser-to-browser sync.12.3 KB · 1 month agonoise-kk.test.ts4.9 KB · 1 month agonoise-small-order-dh.test.tsPB-26-014 follow-up — the JS-side DH boundaries in noise-js.ts mirror the Rust core's small-order X25519 blocklist (libhydrogen's contributory-behaviour list).3.8 KB · 1 month agonoise.reject-zero-dh.test.tsPCH-02-009 regression tests — every Noise NK DH must reject an all-zero shared secret (low-order / identity peer point) instead of feeding it into the key schedule.2.6 KB · 1 month agopairing-dial.test.ts7.4 KB · 1 month agopairing-dial.tsThe WebSocket seam every relay-facing Peach flow shares.4.3 KB · 1 month agopairing-handshake.tsShared pairing primitives used by the live relay-adoption path.1.1 KB · 1 month agopairing-invitation.test.ts4.2 KB · 1 month agopairing-invitation.ts4.3 KB · 1 month agopasskey-flags.tspasskey-flags.ts — single switch for the Firefox passkey content-script proxy.2.1 KB · 6 months agopasskey-utils.test.ts1.5 KB · 1 month agopasskey-utils.tspasskey-utils.ts — WebAuthn relying-party-id validation.1.3 KB · 1 month agopro-nudge.test.ts1.8 KB · 3 weeks agopro-nudge.ts1.2 KB · 3 weeks agorecovery-word-list.tsrecovery-word-list.ts — 2048-word recovery word list for Peach vault recovery.20.0 KB · 1 month agorecovery-words.checksum.test.tsT-002: BIP39 checksum rejection4.6 KB · 4 months agorecovery-words.cross-platform.test.ts2.4 KB · 3 months agorecovery-words.integrity.test.tsT-001: BIP39 word-list integrity2.6 KB · 4 months agorecovery-words.kek.test.tsT-003: 128-bit prefix-KEK invariant (PCH-01-005 sibling)6.7 KB · 4 months agorecovery-words.tsrecovery-words.ts — BIP39-compatible recovery word encoding for Peach vault recovery.6.3 KB · 4 months agorelease-notes.test.ts4.6 KB · 1 month agorelease-notes.tsCurated release history and post-update notice selection.5.8 KB · 1 month agorendezvous.test.ts3.1 KB · 1 month agorendezvous.ts5.7 KB · 1 month agoshortcuts.test.ts@vitest-environment jsdom4.0 KB · 6 months agoshortcuts.tsshortcuts.ts — keybinding schema, defaults, matcher, formatter.6.7 KB · 6 months agostorage.ts537 B · 5 months agosync-entry-envelope.kat.test.ts1.5 KB · 1 month agosync-identity.test.ts3.1 KB · 1 month agosync-identity.tsSync identity — vault-scoped primitives.3.7 KB · 1 month agosync-kk-transport.test.ts18.5 KB · 1 month agosync-limits.tsSync trust + resource bounds — audit fixes HV-1 (timestamp clamp) and MV-3 (receive-path size bounds).4.6 KB · 1 month agosync-outcome.test.ts7.0 KB · 1 month agosync-outcome.tsWhy a sync run ended, in a form both the service worker and the popup can name.7.2 KB · 1 month agosync-padding.test.ts4.9 KB · 3 months agosync-padding.tsE7: frame padding at the relay boundary.4.6 KB · 3 months agosync-transport.tsWebSocket reconnect transport — Noise KK with both paired static keys.23.3 KB · 1 month agosync-types.tsVault sync — type definitions.8.4 KB · 1 month agosync.disconnect.test.tsT-020: WebSocket sync-disconnect handling (PCH-01-026 #9)12.2 KB · 1 month agotypes.tstypes.ts — cross-boundary types and the MessageType union.16.1 KB · 1 month agovault-adopt-snapshot.test.ts17.3 KB · 1 month agovault-adopt.test.ts44.9 KB · 1 month agovault-adopt.ts34.3 KB · 1 month ago
test/641 B · 1 month ago
tests/118.7 KB · 1 month ago
.gitignore31 B · 1 month agobiome.json1.0 KB · 1 month agobun.lock136.0 KB · 1 month agoDockerfile.firefox-gate212 B · 1 month agokoh.build86 B · 4 weeks agoLICENSE34.3 KB · 4 months agomanifest.firefox.json2.0 KB · 3 weeks agomanifest.json1.6 KB · 3 weeks agopackage.json3.3 KB · 3 weeks agoplaywright.config.ts1.8 KB · 1 month agoREADME.mdA free, open source, local-first password manager for Chrome, Firefox, and Android.2.1 KB · 1 month agotsconfig.json540 B · 1 month agovite.config.ts3.6 KB · 1 month agovitest.config.ts526 B · 1 month ago
7e401ad4a9dfadd passwordHistory model, capture old password on change in updateEntry, preserve across unlock, strip from passive fill4 months ago761e69236230fix: Copy & fill auto-saves and dismisses — no extra Save click (v3.6.158)4 months ago2adce7cc303efeat: contextual signup wizard — step through email → username → password on multi-field signup forms (v3.6.157)4 months ago3ae3a65f503ffix: detect separate email fields + exclude personal name fields from autofill (v3.6.156)4 months ago46998e6f05b2fix: inline edit mode no longer hijacked by silver-platter type-to-search handler (v3.6.155)4 months ago288ded81074etweak: rename vault sort label 'used' to 'recent' (key unchanged) (v3.6.154)4 months agof70e3c342944revert: remove vault list search-scope toggle (both/emails/usernames) from sort bar; search defaults to full-text 'both' as before (v3.6.153)4 months agoae1591d81f00fix: popup steadiness — will-change top/left, track modal internal scroll, dismiss when anchor leaves DOM (v3.6.152)4 months agodfa5e826f09dfix: shadow root delegatesFocus so modal focus traps see the popup host as focused instead of an opaque closed-shadow node (v3.6.151)4 months ago93a2840e97c4fix: identity helper + suggest list fade is scroll-state-aware (only when overflowing, clears at bottom) instead of an always-on mask that cut short lists (v3.6.150)4 months agoa45e13531957fix: inline popup mounts at document root for non-modal forms + compensates fixed containing-block ancestors (backdrop-filter/transform); renders on-field instead of clipped off-screen (v3.6.149)4 months ago5233be9a5934feat: Add vault search MRU scope toggle (v3.6.148)4 months agoccffed5200abfix: Add identity search, MRU sort, and username-aware fallback (v3.6.147)4 months ago70b8eecdabd3add internal notes — complete 12-part reference for Android team4 months agof907c7a5cc9fdocs: Record explicit-summon fix (v3.6.146)4 months ago7834ef7ed3cffix: Make explicit login-form icon clicks open Peach (v3.6.146)4 months ago5ede1338abb9release v3.6.145 to Chrome Web Store and Firefox AMO4 months agoadc8a19b4e39extend globe-detection to entry view domain row — DomainFavicon component, shared titleInitials/titleBackground, fix contracts mock4 months agob0f705a676edshow InitialsChip instead of Chrome globe for entries without a real favicon — canvas-based globe detection, no flash (v3.6.145)4 months agod12779c5867cfix passkey entry editability — isPasskeyOnly excludes TOTP/email, + 2FA always visible on login entries4 months agoab5496be14e8fix passkey Google origin timing bug and passkey+TOTP real-time merge4 months agoa885fa9c118abump version to 3.6.1424 months ago528a807295c0swallow Chrome Missing GetResponseDetails.responseJson error in GET pass-through paths4 months ago3aafd13289fbpass through GET requests with no matching Peach credential instead of rejecting NotAllowedError5 months agoea3d3ceb520adocs: session notes OUTCOMES — v3.6.140 end-to-end passkey create+get proof, orthogonality of null-buffer harness artifact, smoke now green5 months agoda331121f21ftest: prove passkey create+get end-to-end — extend compile-stripped E2E Pro bypass to provider-enable and get gates, drive smoke setup over messages (create/unlock/enable, lockOnClose off), approve in fresh popups; smoke now green (v3.6.140)5 months ago071b1347e42ddocs: session notes OUTCOMES — v3.6.140 passkey document-is-not-defined root cause and fix5 months ago6e876e9e1422fix: disable Vite modulePreload so the service worker's dynamic import() helper no longer touches document — passkey get/create no longer throws ReferenceError mid-flow (v3.6.140)5 months ago21fbb6627cdduse font-display block + preload RegularItalic so entry names keep Cormorant after pre-lock removal, no Times fallback (v3.6.139)5 months ago5847a1a7137dremove static #pre-lock splash so unlocked popup no longer flashes the lock screen on open (v3.6.138)5 months agoec66f22212b6test: add atomic-persist regression — a slot-B write failure must restore slot A so no phantom entry is left on disk (covers v3.6.137)5 months agoebb7bd2456e6fix: make vault persist atomic — restore prior slot A if a later write fails, so a failed save never leaves disk ahead of memory; eliminates phantom/duplicate entries (v3.6.137)5 months ago34691b7eed91fix: add unlimitedStorage + surface real save errors + plain-text note paste; cap vault history 10→5 — resolves intermittent STORAGE_QUOTA_EXCEEDED save failures (v3.6.136)5 months agoc3a13ed2e2c4before investigating intermittent entry/note save failures5 months agodeb59054482erelease v3.6.135 to Chrome Web Store and Firefox AMO5 months ago797d654ef572before v3.6.135 store release5 months ago3a5e85455435replace blur-based list dismiss with mousedown watcher — focus traps can't close the list (v3.6.135)5 months ago062f87c4a7e5resist focus-trap blur in identity suggest list + popup auto-close after inline unlock (v3.6.134)5 months ago42176e8b1f29broaden modal detection to form ancestor + position:fixed fallback (v3.6.132)5 months ago91ca0c3fee4eappend popup inside modal ancestor so focus traps don't intercept Peach's internal inputs (v3.6.131)5 months agob1774d59b9e2before modal-anchor popup fix5 months ago293e14f7664efix(sw): register onMessage handler synchronously at SW startup + gate unlock-dependent handlers on a restore-ready promise — fixes cold-start race where the popup's HAS_VAULT hit a listenerless worker and flashed onboarding; preserves the no-spurious-lock fix (v3.6.130)5 months agod4136f2febfddocs: independent security audit report — findings, resolutions, verification, safety rating (8.5/10), and codebase recommendations5 months ago3352fb2a8b40independent security audit complete — all 18 confirmed findings resolved (v3.6.129); mobile resynced (peach-android v1.0.39)5 months ago07ce1ae7d42cfix(security): recovery words no longer exported to world-readable Android public Downloads — native offers a clipboard copy, desktop keeps user-chosen-location .txt (MEDIUM #7); document Web3Forms key as an intentionally-public anti-spam token (INFO #11) (v3.6.129)5 months agocf426553736efix(security): CSV export neutralizes spreadsheet formula injection (MEDIUM #8); 2FA toast no longer renders the live code into page-readable DOM (LOW #10); password generator uses rejection sampling to remove modulo bias (INFO #12) (v3.6.128)5 months agoc9f2283eb546fix(security): duress pads both vault slots to a fixed 256KiB ceiling so ciphertext lengths never reveal a hidden decoy vault exists — restores plausible deniability across real-vault growth (MEDIUM #5) (v3.6.127)5 months ago935ae427d7eefix(security): pairing now gates persistence on a user-confirmed Short Authentication String (SAS) derived from the shared Noise handshake hash — both devices show it, user confirms match before enrolling; defeats LAN/audio-range initiator impersonation (HIGH #4, extension+shared) (v3.6.126)5 months ago2da1a2aff52cfix(security): inline locked bubble no longer collects the master password in page DOM — routes to the trusted popup via OPEN_POPUP; removes page-observable keystroke surface and the trim/no-trim inconsistency (HIGH #3 + LOW #9) (v3.6.125)5 months agoc0204fa478dffix(security): CSV/JSON import requires a real master password when no vault exists; CREATE_VAULT handler rejects empty password — no more empty-key vault with zero at-rest protection (HIGH) (v3.6.124)5 months ago

← newerolder →

details

Peach

A free, open source, local-first password manager for Chrome, Firefox, and Android.

Peach encrypts your vault on your device. No hosted vault, subscription, or account is required to use it.

peachpasswords.com


Features

  • Passwords, cards, and secure notes — keep your private data together in one encrypted vault
  • Inline autofill — fill and save credentials without leaving the page
  • TOTP built in — generate two-factor codes without a separate authenticator
  • Password health — find weak, reused, and exposed passwords
  • Portable backups — export and restore with PeachScript or a .peach file

Peach Pro adds:

  • Peach Sync — end-to-end encrypted sync across paired devices
  • Passkeys — save and use passkeys in Chrome and Firefox
  • Peach Codex — print an encrypted, scannable backup of your vault
  • Advanced vault health, Canary Entries, and duress tools

See the Peach website for current availability and Pro details.


Install


Open Source

Peach is released under the GPL v3. This repository contains Peach's Chrome and Firefox browser extensions. Android is maintained separately.

The source is hosted on Kepr, Asha Software's version control platform.


Security

Vault data is encrypted with AES-256-GCM and protected by Argon2id key derivation. Peach Sync authenticates paired devices and encrypts data in transit.

Implementation details live alongside the code:


Building

bun install --frozen-lockfile
bun run build

Builds are written to dist-chrome/ and dist-firefox/.


Built by Asha Software · [email protected]